Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/3230322e362e3232342e302f32302d3234203d3e203233373536.roa
File:                     3230322e362e3232342e302f32302d3234203d3e203233373536.roa (raw, json)
Hash identifier:          j2kFk/YVfgNkgWhXwbYb7FWRSsZvQgR1cjJdN6Wj8Os=
Subject key identifier:   DB:29:5F:CF:67:B9:AA:BB:E9:5C:0A:AB:08:9D:73:8A:CA:DD:8E:CF
Certificate issuer:       /CN=E66029B9A162C470EEC1DFA42227448C5628C7C0
Certificate serial:       026A405C4D677DBD61060C6C177A368CDAA16F2F
Authority key identifier: E6:60:29:B9:A1:62:C4:70:EE:C1:DF:A4:22:27:44:8C:56:28:C7:C0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E66029B9A162C470EEC1DFA42227448C5628C7C0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/3230322e362e3232342e302f32302d3234203d3e203233373536.roa
Signing time:             Sun 03 May 2026 02:58:54 +0000
ROA not before:           Sun 03 May 2026 02:53:54 +0000
ROA not after:            Sun 02 May 2027 02:58:54 +0000
asID:                     23756
IP address blocks:        202.6.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/E66029B9A162C470EEC1DFA42227448C5628C7C0.crl
                          rsync://rpki-rsync.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/E66029B9A162C470EEC1DFA42227448C5628C7C0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E66029B9A162C470EEC1DFA42227448C5628C7C0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:28:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:6a:40:5c:4d:67:7d:bd:61:06:0c:6c:17:7a:36:8c:da:a1:6f:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E66029B9A162C470EEC1DFA42227448C5628C7C0
        Validity
            Not Before: May  3 02:53:54 2026 GMT
            Not After : May  2 02:58:54 2027 GMT
        Subject: CN=DB295FCF67B9AABBE95C0AAB089D738ACADD8ECF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d5:c1:46:a3:82:00:9e:af:27:1a:b9:ef:67:
                    f7:a9:e8:22:10:08:0c:74:e4:29:0a:f8:99:a2:1e:
                    d0:a5:84:0f:fa:ab:98:cc:4a:5c:b0:6c:cd:29:05:
                    a6:94:d5:9b:23:06:86:33:0e:bd:80:95:9a:39:96:
                    1c:e3:6a:02:d4:f3:a2:37:ee:61:8c:72:0b:64:45:
                    4d:4f:f0:b1:5f:e2:ba:13:7e:6a:75:6d:9e:3a:e5:
                    4c:30:f9:3d:e6:f4:1d:0d:fc:86:9a:76:cd:de:8f:
                    a4:e3:f8:6b:b5:87:d5:00:0f:53:1a:d6:08:e5:4b:
                    de:93:3d:4a:f7:b6:03:b7:11:50:5c:9b:f4:b8:dc:
                    1e:59:4f:3b:55:0d:f3:11:e9:d7:7d:df:99:29:f2:
                    2f:1c:b9:6c:3e:c9:50:6d:84:f0:32:74:63:7a:59:
                    c4:aa:00:43:54:86:35:bb:bd:4c:d4:7c:91:24:ba:
                    72:8f:ea:73:4c:73:36:60:20:a3:92:2e:c0:ed:2c:
                    b8:61:70:76:b9:5f:de:3c:3e:d6:01:45:ed:85:9e:
                    b7:5b:ea:38:8f:e9:84:ed:09:38:99:2a:b5:60:a3:
                    7f:55:11:ad:86:15:e8:1f:dd:92:51:0c:41:54:6f:
                    40:71:52:4a:30:a8:37:b7:6e:e0:99:31:e2:18:63:
                    83:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:29:5F:CF:67:B9:AA:BB:E9:5C:0A:AB:08:9D:73:8A:CA:DD:8E:CF
            X509v3 Authority Key Identifier:
                keyid:E6:60:29:B9:A1:62:C4:70:EE:C1:DF:A4:22:27:44:8C:56:28:C7:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/E66029B9A162C470EEC1DFA42227448C5628C7C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E66029B9A162C470EEC1DFA42227448C5628C7C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/3230322e362e3232342e302f32302d3234203d3e203233373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.6.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         02:45:40:cd:1d:e7:35:3a:ae:d4:a2:44:5e:a8:55:9f:92:fe:
         eb:03:5c:4b:a6:36:60:79:0b:f2:77:69:4d:26:e8:01:a3:57:
         a7:63:42:19:4c:d8:5f:33:24:e5:21:e1:b6:58:e1:62:65:dd:
         00:8b:24:c1:c5:5a:34:36:be:17:d8:87:ac:4d:8c:91:15:3e:
         3d:df:0b:c3:7a:ce:d9:02:1c:ab:fa:65:e1:3f:71:39:86:a5:
         4c:32:78:32:42:12:a0:dd:fd:a0:8a:4d:8b:e3:9f:ee:84:23:
         73:b0:a3:99:29:81:26:6a:b5:08:74:65:7c:9f:01:04:e2:25:
         50:b0:b1:b2:e8:01:e3:53:44:84:8e:c1:8f:83:11:b7:54:0a:
         f1:9e:1e:3c:95:c8:05:5f:01:9c:03:8b:12:bc:2e:85:a8:de:
         a2:1e:96:46:76:f0:4d:c0:4f:a4:e8:8e:99:bc:4c:7a:35:0a:
         0c:52:d8:69:64:8a:ce:24:21:d6:cd:f0:08:ef:83:d4:12:d3:
         b4:f4:03:f8:46:23:34:fa:50:66:cc:fa:ec:d9:07:ae:05:71:
         0b:12:6e:de:57:41:f8:34:6a:78:0e:b4:84:9a:c3:c9:ae:92:
         aa:3a:91:8f:0c:2d:6e:19:cb:b6:ad:0c:4b:08:57:03:c4:f9:
         44:5f:42:20
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUAmpAXE1nfb1hBgxsF3o2jNqhby8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTY2MDI5QjlBMTYyQzQ3MEVFQzFERkE0MjIyNzQ0OEM1
NjI4QzdDMDAeFw0yNjA1MDMwMjUzNTRaFw0yNzA1MDIwMjU4NTRaMDMxMTAvBgNV
BAMTKERCMjk1RkNGNjdCOUFBQkJFOTVDMEFBQjA4OUQ3MzhBQ0FERDhFQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ1cFGo4IAnq8nGrnvZ/ep6CIQ
CAx05CkK+JmiHtClhA/6q5jMSlywbM0pBaaU1ZsjBoYzDr2AlZo5lhzjagLU86I3
7mGMcgtkRU1P8LFf4roTfmp1bZ465Uww+T3m9B0N/Iaads3ej6Tj+Gu1h9UAD1Ma
1gjlS96TPUr3tgO3EVBcm/S43B5ZTztVDfMR6dd935kp8i8cuWw+yVBthPAydGN6
WcSqAENUhjW7vUzUfJEkunKP6nNMczZgIKOSLsDtLLhhcHa5X948PtYBRe2Fnrdb
6jiP6YTtCTiZKrVgo39VEa2GFegf3ZJRDEFUb0BxUkowqDe3buCZMeIYY4MHAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQU2ylfz2e5qrvpXAqrCJ1zisrdjs8wHwYDVR0j
BBgwFoAU5mApuaFixHDuwd+kIidEjFYox8AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YWQwZjFhNmUtODNiNi00NTM0LTk2N2QtZjhkYjNjMzcxMWY0LzAvRTY2MDI5QjlB
MTYyQzQ3MEVFQzFERkE0MjIyNzQ0OEM1NjI4QzdDMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FNjYwMjlCOUExNjJDNDcwRUVDMURGQTQyMjI3NDQ4QzU2MjhD
N0MwLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2FkMGYxYTZlLTgzYjYtNDUzNC05
NjdkLWY4ZGIzYzM3MTFmNC8wLzMyMzAzMjJlMzYyZTMyMzIzNDJlMzAyZjMyMzAy
ZDMyMzQyMDNkM2UyMDMyMzMzNzM1MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATKBuAwDQYJKoZIhvcN
AQELBQADggEBAAJFQM0d5zU6rtSiRF6oVZ+S/usDXEumNmB5C/J3aU0m6AGjV6dj
QhlM2F8zJOUh4bZY4WJl3QCLJMHFWjQ2vhfYh6xNjJEVPj3fC8N6ztkCHKv6ZeE/
cTmGpUwyeDJCEqDd/aCKTYvjn+6EI3Owo5kpgSZqtQh0ZXyfAQTiJVCwsbLoAeNT
RISOwY+DEbdUCvGeHjyVyAVfAZwDixK8LoWo3qIelkZ28E3AT6Tojpm8THo1CgxS
2Glkis4kIdbN8Ajvg9QS07T0A/hGIzT6UGbM+uzZB64FcQsSbt5XQfg0angOtISa
w8mukqo6kY8MLW4Zy7atDEsIVwPE+URfQiA=
-----END CERTIFICATE-----
Generated at Wed May 13 06:56:00 2026 by rpki-client